Method, system, and apparatus for a secure bus on a printed circuit board

ABSTRACT

A method, apparatus, and system, the apparatus including, in some embodiments, a printed circuit board (PCB), an integrated circuit (IC) positioned over and electrically connected to the PCB, a chip positioned between the PCB and the IC, and a closed boundary barrier between and contacting the PCB and the IC to define an inner containment area that completely contains the chip within the inner containment area.

BACKGROUND

Maintaining and protecting the security of a device or system may have anumber of benefits. For example, a secure device, operating system,application, and system may be configured to prevent the unauthorized orundesired appropriation (e.g., “hacking”) of data about or from thedevice, operating system, application, and system. Some systems anddevices may include one or more security features and applications.Security features and applications may include encryption and passwordprotecting data.

Some security applications may access a memory. Some securityapplications may provide communication to and from the application via adata bus or other access point. Generally, from some securityperspectives, access to a communication bus and/or a memory to storesecurity data may provide an opportunity to breach the security of asystem and device.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is an exemplary illustration of a side elevation view of anapparatus, in accordance with some embodiments herein;

FIG. 2 is an exemplary illustration of a top view of an apparatus, inaccordance with some embodiments herein;

FIG. 3 is an exemplary flow chart of a process, in accordance with someembodiments herein; and

FIG. 4 is an exemplary illustration of a system, in accordance with someembodiments herein.

DETAILED DESCRIPTION

The several embodiments described herein are solely for the purpose ofillustration. Embodiments may include any currently or hereafter-knownversions of the elements described herein. Therefore, persons skilled inthe art will recognize from this description that other embodiments maybe practiced with various modifications and alterations.

FIG. 1 is an exemplary side elevation view of an apparatus in accordancewith some embodiments herein, generally referenced by numeral 100. FIG.2 provides a top plan view of apparatus 100. FIGS. 1 and 2 may both bereferenced for an understanding of apparatus 100 in connection with thedisclosure the several embodiments herein.

Apparatus 100 includes a printed circuit board (PCB) 105, an integratedcircuit (IC) 110 positioned over PCB 105 and electrically connected toPCB 105, and an IC chip 125 positioned between PCB 105 and IC 110. Insome embodiments, PCB 105 and IC 110 are arranged in a spaced apartconfiguration. Apparatus 100 may include a closed boundary barrier 145between and in contact with PCB 105 and IC 110.

PCB 105 may include one or more levels. The one or more layers mayinclude laminated conductive layers separated and supported by layers ofinsulating substrates. In some embodiments, the various layers may beconnected by vias extending between the various layers.

In some embodiments herein, chip 125 is electrically connected to PCB110 by one or more pads 130. A PCB pad 135 may provide an electricallyconductive connection point to facilitate connecting chip 125 to PCB105. Chip 125, pads 130, and PCB pads 135 may be contained or otherwiselocated within an inner confinement area 150 defined by boundary barrier145. In some embodiments, boundary barrier 145 provides a continuousstructure between PCB 105 and IC 110 that separates inner confinementarea 150 including chip 125, pads 130, and PCB pads 135 from beingaccessed from a point exterior to the inner confinement area.

In some embodiments, chip 125, pads 130, and PCB pads 135 are completelysurrounded and physically shielded from direct physical contact (e.g.,undesired eavesdropping, probing, etc.) by boundary barrier 145. Forexample, IC 110 may be located over a top of chip 125, PCB 105 may belocated below a bottom of chip 125, and boundary barrier 145 may belocated outward of lateral sides of chip 125, pads 130, and PCB pads135. In some embodiments where boundary barrier 145 is between and incontact with PCB 105 and IC 110, the PCB, IC, and boundary barrier maycooperate to physically shield and deny physical access to chip 125,pads 130, and PCB pads 135.

Boundary barrier 145 may be a conductive material. In some embodiments,boundary barrier 145 may include a solder material. In some embodiments,boundary barrier 145 may provide a conductive pathway between PCB 105and IC 110.

In some embodiments, PCB pads 135 may include a conductive signal traceon a surface of PCB 105, a wire, a data bus, and other electricalconductive connectors. PCB pads 135 may be any number, combination, andvariety of communication pathways between PCB 105 and IC 110.

In some embodiments, PCB pads 135 (e.g., a data bus) are locatedentirely within inner confinement area 150. The data bus located in theinner confinement area 150 is physically shielded from the environmentoutside of the inner confinement area. Accordingly, a communicationsession between PCB 105, chip 125, and IC 110 may be conducted in anefficient and secure manner.

In some embodiments in accordance herewith, communication between chip125 and IC 110 may be provided over a communication pathway (e.g., databus, conductor, trace, etc.) that is physically isolated and, in someaspects, secure. Accordingly, some considerations for encrypting dataover a data bus may be lessened or obviated.

In some embodiments, IC 125 may include a security IC. The security ICmay have one or more security features incorporated therein. Thesecurity IC may include one or more encryption features to encrypt orotherwise enable secure handling of data and information processed by IC110. For example, the security chip may include instructions andmechanisms for executing cryptographic operations, sensors, etc. In someembodiments, IC 125 may tend to be larger than chip 125, due at least inpart to the inclusion of encryption features in the security IC

In some embodiments, boundary barrier 145 may include, incorporate,and/or be associated with one or more integrity mechanisms. Theintegrity mechanisms (not shown) may provide an indication of a breach,a break, a discontinuity, or another type of compromise and/ordegradation of the structural integrity of boundary barrier 145. Theintegrity mechanisms may include a detector that senses a breach basedon a resistive or a capacitive testing process and other types ofsensors.

In some embodiments, IC 110 is connected to PCB pad 135 by an innerconnector 140. Inner connector 140 may be a conductive pathway, such as,for example, a solder material.

In some embodiments, IC 110 is connected to a PCB conductive trace 120by an outer connector 115. Outer connector 115 may be a conductivepathway, such as, for example, a solder material. Outer connection 115may provide a further physical barrier to block physical access to chip125 and electrical connections to chip 125.

Shown is an embodiment where PCB conductive trace 120 and outerconnector 115 are outside of the inner confinement area 150.Accordingly, communication sessions conducted using the PCB conductivetrace and the outer connector may be accessible (e.g., not protected orsecure).

FIG. 3 is an exemplary flow diagram of a process 300, in accordance withsome embodiments herein. Process 300 and aspects thereof may used in amanufacturing flow to produce a system and apparatus in accordance witha number of embodiments disclosed herein. Process will be disclosed in acontext of the apparatus depicted in FIGS. 1 and 2. Process 300 may beapplicable to apparatuses other than or in addition to those shown inFIGS. 1 and 2.

At operation 300, chip 125 is placed on PCB 105. In some embodiments,the chip may include a memory module. In some embodiments, the chip maybe prepared for mounting on PCB 105 prior to positioning operation 300.For example, chip 125 may undergo a thinning process during themanufacture thereof to prepare it for use in process 300.

At operation 310, chip 125 is electrically connected to PCB 105. Chip125 may be attached to PCB 105 in accordance with a PCB manufacturingprocess, including, for example, by a trace, a wire, PCB pad 135, abump, a data bus, and combinations thereof. The electrical connectionsmay provide a communication pathway to the chip.

At operation 315, IC 110 is positioned over PCB 110, chip 125, and theelectrical connections to the chip (e.g., 130, 135).

At operation 320, boundary barrier 145 is formed on PCB 105 tocompletely surround chip 125 and electrical connections 130, 135 to thechip. Boundary barrier 145 is arranged between IC 110 and PCB 105 atlocations beyond a lateral extent of the chip and the electricalconnections to the chip, as illustrated in FIGS. 1 and 2. Boundarybarrier 145, in conjunction with chip 125 and IC 110 extending over chip125, cooperate to define the inner containment area 150 within which thechip and the electrical connections thereto are contained. Boundarybarrier 145 may extend from PCB 105 to IC 110 in a region between thePCB and the IC.

In some embodiments, boundary barrier 145 includes a solder materialthat may be subjected to a thermal reflow process to attach the boundarybarrier to PCB 105. During the reflow process, boundary barrier 145 maybe heated to a temperature sufficient to cause the solder of theboundary barrier to flow, thereby facilitating an attachment of the ICto the PCB.

It is noted that the various operations of process 300 may beaccomplished in conjunction or in association with other processes andin sequences other than that specifically delineated in FIG. 3. Forexample, operation 315 may occur before, after, or at least partially inparallel with operation 320.

FIG. 4 is an exemplary depiction of a system 400 including an apparatus,for example a PCB 405 having a memory chip 425 attached to the PCB by acombination of electrical connections, including pads 430, PCB pads 435,and inner connections 440. Memory chip 425 and the electricalconnections thereto are contained within an inner confinement area 450that is defined by a boundary barrier 445. An IC 410 is positioned overmemory chip 425 and the electrical connections to the memory chip.Memory chip 425 and the electrical connections thereto are completelycontained within inner confinement area 450. An outer connection 415provides a conductive pathway to trace 420 from PCB 405. A device 460 isconnected to PCB 405 by connector (e.g., a wire).

Those in the art should appreciate that system 400 may includeadditional, fewer, or alternative components to PCB 405, memory chip425, IC 410, and device 460.

In some embodiments, device 460 may include a subsystem such as, forexample, a graphics subsystem, an audio processing subsystem, otherspecialized processing subsystems, a processor, and discrete components.In an instance device 460 is a memory device 460 may comprise any typeof memory for storing data, including but not limited to a Single DataRate Random Access Memory, a Double Data Rate Random Access Memory, or aProgrammable Read Only Memory.

It should be appreciated that the drawings herein are illustrative ofvarious aspects of the embodiments herein, not exhaustive of the presentdisclosure.

1.-9. (canceled)
 10. A method comprising: positioning a chip over aprinted circuit board (PCB); electrically connecting the chip to thePCB; forming a closed boundary barrier between and contacting the PCBand the IC to define an inner containment area, wherein the closedboundary is a closed, entirely continuous structure extending from andbetween the PCB and the IC, and the chip and all electrical connectionsto the chip are completely contained within the inner containment area;positioning an integrated circuit (IC) over the PCB, the IC extendingover the chip and the closed boundary barrier and contacting the closedboundary barrier.
 11. The method of claim 10, wherein the positioning ofthe IC over the PCB includes securing the IC in contact with the closedboundary barrier to form an impenetrable barrier around the chip. 12.The method of claim 11, wherein the securing includes a solder flowprocess to attach the IC to the PCB.
 13. The method of claim 10, furthercomprising associating an integrity detection mechanism with the closedboundary barrier to indicate a breach of the closed boundary barrier.14. The method of claim 10, wherein the electrical connections to thememory chip comprise a data bus.
 15. The method of claim 10, wherein thePCB comprises a plurality of layers.
 16. The method of claim 10, whereinthe closed boundary barrier includes a conductive solder.
 17. The methodof claim 10, further comprising providing an electrical connectionbetween the IC and the PCB in an area outside of the containment area.18. The method of claim 10, wherein the chip is a memory chip. 19.-24.(canceled)